vxunderground | Unsorted

Telegram-канал vxunderground - vx-underground

14365

The largest collection of malware source, samples, and papers on the internet. Password: infected Website: https://www.vx-underground.org/ vx-underground Telegram chatroom link: https://t.me/+njfLzUrqos01ZWNh

Subscribe to a channel

vx-underground

Hold up — let 4chan speak. They're onto something here

Читать полностью…

vx-underground

Here is what's going to happen

SoyJak nerds will meme 4chan mods for awhile. In the midst of it YouTubers will make videos discussing it (MoistCritical, MeatCanyon, TurkeyTom, etc).

Then in like, a year, it'll kind of be back to normal

Читать полностью…

vx-underground

This random document fell off the back of a bus. Weird.

This random document which randomly fell off the back of a bus (randomly) says MITRE is no longer supporting the CVE program as of April 16th, 2025. Which is crazy, because this random document is dated April 15th, 2025.

Читать полностью…

vx-underground

tl;dr nerds from /qa/ raided /lgbt/, mods got irritated, shut down /qa/. Nerds migrated to SoyJak Party instead.

SoyJak Party nerds discovered 4chan was using a dangerously outdated version of PHP and compromised the site. They were able to get access to virtually everything on the site. There is a thread on SoyJak Party about it

Drama escalated when moderators were discovered using emails as firstname-lastname with a .edu because it made it very easy for SoyJak Party nerds to find and meme 4chan moderators.

Drama only intensified more when SoyJak Party nerds memed and forged fake .gov email's into the 4chan moderator images shared. It result in hysteria as conspiracy theory nerds went off the deep end.

tldr tldr nerds raid some gay place, mods get mad, nerds go ballistic and all hell breaks loose

Читать полностью…

vx-underground

We have discovered the krabby patty secret formula for making people give a fuck about cybersecurity research and news.

If you make a brief post explaining what has happened, or what a paper and/or code is doing, it will be ignored — even if you share a link.

However, if you make a post explaining what has happened, basically spoon feeding the subject or paper to the readers, your engagement rate will skyrocket.

SOME of you are really, really, REALLY lazy and can't be bothered to click a link. You want the information hyper-compressed and delivered on a golden-plate with little rose petals and cool and badass cat pictures.

Читать полностью…

vx-underground

Hello,

For several years we've had people ask us something along the lines of, "what's your favorite paper?". Well, today I've begun putting together a "Best Of" list.

This isn't a complete list, I'll add more later.

https://vx-underground.org/Best%20Of

Читать полностью…

vx-underground

This generation was the first to be raised online

Google harvested my data
Tumblr harvested my data
YouTube harvested my data
Vine harvested my data
DeviantArt harvested my data
Blogger harvested my data
Facebook harvested my data
Instagram harvested my data
Etsy harvested my data
Twitter harvested my data

Читать полностью…

vx-underground

Chat, why are Law Enforcement agencies happy people are staying on Telegram? 🤔

Читать полностью…

vx-underground

Yeah bro, it's super cool a bunch of cat pictures is more widely shared, appreciated, and praised than 6 years of work of archiving malware related educational material

Читать полностью…

vx-underground

Due to insanely high-demand, we will be working on a kitty cat picture repack. The repack will have non-cat images removed. We will also increase the number of kitty cat pictures present.

Special thanks to DiffeKey for fixing the entire thing.

Читать полностью…

vx-underground

Still not as oopsie-doopsie as when the Indian military left the PDB data present which displayed the developers first name and last name, but making the path "hack" is pretty oopsie too.

Читать полностью…

vx-underground

The National Police Agency (NPA) of Japan recent documentation of state-sponsored Threat Actors from China is interesting.

A group they believe to be a subset of APT10, abuses WSB (Windows Sandbox) by creating a .wsb configuration file and using it to spin up an instance of the Windows Sandbox.

This is interesting because Windows Defender cannot access the Windows Sandbox (image 1).

The payload enables folder sharing, network access, clipboard access, microphone access, and video access.

tl;dr abusing the sandbox, sandbox as a c2

Читать полностью…

vx-underground

Windows 10 support ends October 14th, 2025. It is the calling of the Linux nerds.

Читать полностью…

vx-underground

"Nothing is certain except computer viruses and cat pictures" — Benjamin Franklin

Читать полностью…

vx-underground

Nintendo ransomware group

Читать полностью…

vx-underground

MoistCritical will probably name it, "The 4Chan situation is crazy". He'll open the video with a weird reference to semen, erections, or anime, then say "I'm not an expert on the subject". It'll conclude with "That's pretty much it, see ya".

Читать полностью…

vx-underground

what do u mean a website historically used for memeing and trolling forked and the memesters and trollsters decided to meme and troll?? how could this have happened???

Читать полностью…

vx-underground

BreachForum domain not seized. I misread something from my daily drama nerds cycle I go through.

BreachForums is offline — nerds speculated it will be seized. Or maybe it's just infra problems, or something.

No one knows anything. I can't read

Читать полностью…

vx-underground

4chan compromised by SoyJak Party people over some conflicts with raiding LGBT image boards — databases dumped, emails leaked, source code leaked

BreachForums domain seized

It's Tuesday

Читать полностью…

vx-underground

Hasherezade just unveiled another process injection method. There are probably 20 or 30 different process injection methods now, and nerds are still using CreateRemoteThread like it's 2005

Читать полностью…

vx-underground

"North Korea has ceremonially opened its first computer club — with Kim Jong Un himself attending the event.

Now, North Korean hackers will be able to comfortably steal billions of dollars from “Western capitalists” for their leader." — Nexta TV

... Based and/or cyber criminal pilled?

Читать полностью…

vx-underground

April 11th, 2025, Waylon Wilcox of Dillsburg, Pennsylvania, United States, plead guilty to two (2) counts of filing false individual income tax returns to the United States Internal Revenue Service.

Mr. Wilcox lied to the United States Internal Revenue Service regarding his profit from non-fungible tokens (NFTs).

Mr. Wilcox answered "no" to the United States Internal Revenue Service when asked: “At any time in 2021, did you receive, sell, exchange, or otherwise dispose of financial interest in any virtual currency?” (and any and/or all relevant questions in 2022)*

Mr. Wilcox in actuality collected 97 of 10,000 unique characters of CryptoPunks NFTs* (corrected, edit). He under-reported $8,511,238 in 2021 and $4,599,532 in 2022 in income — far beyond his actual income.

This was in sharp contrast to his (now private) social media which displayed luxurious travels.

Mr. Wilcox owes the United States Internal Revenue Service approx. $3,200,000. He is also facing 6 years in prison.

tl;dr guy makes millions from nfts, clicks "no" on checkbox to tax collection on monies, lies and says doesnt have a lot of monies, doesnt launder money and has millions, the us gov was like "lolwtf how this guy spending so much but says hes broke", looks inside, sees nft monies

Читать полностью…

vx-underground

April 9th, EUROPOL did a press release regarding the arrest of affiliates using IcedID, SystemBC, PikaBot, Smokeloader, and Bumblebee.

EUROPOL memes the malware authors databases for not being 'GDPR compliant' and (in some capacity) reaching out to and identifying affiliates via Telegram.

Furthermore, EUROPOL put out a warning for customers of 'Superstar' and state they're actively doing arrests, home searches, issuing arrest warrants, doing 'knock-n-talks'.

5 unnamed individuals have been apprehended and are being 'interrogated' (quite literally the words used by EUROPOL, the connotation sounds like they're sending people to Guantanamo Bay).

They also released another mini-anime episode

¯\_(ツ)_/¯

Читать полностью…

vx-underground

Oh, and based on seeds and stuff, a guesstimate is over 1 petabyte of cat pictures have been distributed. Cat pictures are x100 more popular than anything we've ever shared or produced

Читать полностью…

vx-underground

A visual representation of cybersecurity

Читать полностью…

vx-underground

Congratulations to APT "Stately Taurus".

Throughout 2021 and 2022 Palo Alto was tracking their activity because they left debug symbols in their DLLs.

They've since learned to remove the debug symbols. Good job, buddy. It took a few years, but you're getting better!

Читать полностью…

vx-underground

Hello,

We would like to speak with the administrative staff at RussianMarket.

Thanks,

Читать полностью…

vx-underground

> wants to add to blocklist
> tweets it

Читать полностью…

vx-underground

Someone contacted us and said they 0day'd their school, infected every machine with a custom RAT, and displayed a MessageBox to everyone in the school at the same time. After that, the school hired him to be in charge of cybersecurity

What the fuck are you talking about

Читать полностью…

vx-underground

doing some work in the backyard today, what kind of tree roots are these???

Читать полностью…
Subscribe to a channel